7 of 7 Threat Modelling Jobs in South Wales

throughout the delivery lifecycle, working closely with infrastructure engineers, architects, and project/programme managers. You'll define and enforce secure configuration baselines, conduct threat modelling and risk assessments, integrate monitoring and alerting, and produce clear security artefacts that guide operational teams. Candidates must be eligible to obtain … controls across hybrid/on-prem Microsoft and Azure-centric environments. Define/enforce hardening standards (e.g., CIS Benchmarks, Microsoft Security Baselines). Perform threat modelling, risk assessments, and security validation/UAT; support incident response. Maintain SBOMs to support vulnerability management and supply-chain assurance. Integrate ...

Secure Development Lifecycle (SDLC) Partner with engineering teams to embed security in the SDLC and DevSecOps practices. Advise and guide on secure coding practices, threat modeling, and architectural reviews. Instrument automated tooling for CI/CD pipelines to improve visibility of security signals and enforcement. Customer & External Engagement Represent ...

What You'll Do Core Responsibilities: Conduct advanced penetration testing across network infrastructure, web applications, and mobile platforms for enterprise clients Perform vulnerability assessments, threat modelling, and risk analysis across diverse technical environments Execute social engineering assessments and physical security testing Produce detailed scoping documents and executive-level … growth-focused security consultancy—not a commodity testing mill ✓ Continuous Learning: Access to research funding, certification sponsorship, conference attendance, and exposure to cutting-edge threat landscapes The Application Process This is a carefully selected search—we're looking for genuine penetration testing professionals with the technical depth to advise ...

Define and maintain engineering and architectural standards, patterns, and best practices. Conduct option evaluations, risk assessments, and make informed technology recommendations. API, Integration & Data Modelling Design API ecosystems including versioning, discovery, governance, throttling, and security. Define schemas, data contracts, and integration patterns for internal and external systems. Promote consistent … point of contact for architectural decision-making. Security, Compliance & Quality Assurance Ensure secure-by-design principles across all solutions. Support threat modelling, risk assessments, and compliance with security and data protection requirements. Drive non-functional requirement definition (performance, scalability, availability, resilience). Support test strategy and quality engineering ...

high-availability systems. Partner with product, SRE, and network engineering to deliver roadmap features from concept to GA with security-by-design. Contribute to threat modeling, architecture reviews, and compliance/audit readiness for Tier 0 services. ...

security area to advance the business relative to the industry. Qualifications 6+ years of experience in vulnerability discovery/security engineering/application security Threat modeling experience of microservice architectures Experience working in a large cloud or software company Extensive research or experience with multiple classes of security bugs … Expertise in applying risk identification techniques to develop security solutions Experience and understanding of Cryptographic algorithms, standards, implementation and application Experience and understanding of threat modeling, penetration testing, reverse engineering and attacks on software Experience working with large enterprise customers ...

code. Build robust observability (metrics, logs, traces) and near-real-time telemetry/streaming pipelines for detection at scale. Security, compliance, and risk Govern threat modeling, architecture reviews, and risk remediation; ensure auditability and policy adherence for Tier 0 services. Embed security and privacy by design; enforce zero trust … code. Build robust observability (metrics, logs, traces) and near-real-time telemetry/streaming pipelines for detection at scale. Security, compliance, and risk Govern threat modeling, architecture reviews, and risk remediation; ensure auditability and policy adherence for Tier 0 services. Embed security and privacy by design; enforce zero trust ...